Hijacked search box

  • Thread starter Thread starter Simon
  • Start date Start date
S

Simon

My internet explorer default website has been hijacked.
It keeps defaulting to a particular search website.
Really peed off because its no doubt attached to some
form of spyware.

Norton and other anti spyware things just dont seem to be
able to sort it

tried all sorts to root out the problem.

Simon
 
you can change back your "home page" by going to Tools,
Internet Options, General tab, then in the "Home Page"
section, type in the address of the site you want to
always come up.

good luck
 
Simon -

NAV and other AV programs aren't generally designed to attend to such
things. Not any one single ANTS program will detect every
Trojan/Spyware/Malware/Scumware that is out there. You need a variety of
weapons, each designed to handle things within it's province. There are some
which will overlap (good for checking the validity of bith the threat and
the programs efficacy) and that is also relatively common with some types of
Spyware.

Inasmuch as you supplied meager (no) info on what you have used in the way
of anti spyware utilities, I will include a general listing here.

Do a quick and abbreviated scan for spyware and parasites:

Doxdesk parasite scan
http://doxdesk.com/parasite/
Jim Eshelmans WSC on-line quick scan
http://www.aumha.org/a/noads.htm
Bugs Glitches and Stuff-ups (Sandi Hardmeiers site...First rate all the way)
http://inetexplorer.mvps.org/Darnit.htm

More In-Depth on-line scanners for parasites and trojans:

SpywareChecker on-line scan
http://www.spywareguide.com/txt_onlinescan.html
GFI free on-line Trojan scanner
http://www.windowsecurity.com/trojanscan/
PestPatrol on-line scan
http://www.pestscan.com/home.asp

Parasites, spyware malware basics:
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm

Check for Spyware - How - to's
First, install the respective programs and then update them immediately, so
that they have the current versions, and definitions. Read the Help Files
and
Tutorials. Run them one at a time. With Ad-Aware you may have it generally
clean whatever it finds. The same applies for CWShredder. Spybot S&D
requires special attention (listed below), as does HijackThis (Only more so.
Details listed below) The programs are listed in order of their general
strength, safety, and purpose. It is perhaps best to install and run these
in this order of appearance. All are freeware programs, but if you are
pleased with the results and quality of the utilities, donations to the
respective Authors are cheerfully accepted.

Ad -Aware
http://www.lavasoftusa.com/support/download/
Ad-Aware Tutorial (might help if you look through this)
http://www.bleepingcomputer.com/forums/index.php?showtutorial=48

CWShredder (cleans all Cool Web Search malware)
http://www.majorgeeks.com/download4086.html
CWShredder Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=47

Coolwebsearch Smartkiller
http://www.safer-networking.org/files/delcwssk.zip

The above item is sometimes necessary if CWShredder detects a SmartSearch2
variant on
your PC.

Spybot S&D
http://www.safer-networking.org/index.php?page=download
Spybot Tutorial (Must Read)
http://www.safer-networking.org/index.php?page=tutorial
Other tutorials for Spybot S&D (Also must read)
http://www.bleepingcomputer.com/forums/index.php?showtutorial=43
http://tomcoyote.com/SPYBOT/index1.php
http://tomcoyote.com/SPYBOT/index2.php

This item below is designed to *prevent* installation of malware and the
like by comparing known CLSID's of these "bad guys" with what is in its
definitions. By enabling a *Kill Bit* it prevents known malignant ActiveX
from being installed or run on your machine. It doesn't remove anything,
nor will it fix anything that is already in your PC. Rather, it will prevent
installation or re-installation of the item once it has been removed either
manually, or by the use of another program which will perform the duty
of removing the spyware.

SpywareBlaster (prevents installation of spyware, Trojans, etc.)
http://www.javacoolsoftware.com/spywareguard.html
SpywareBlaster Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=49

SpywareGuard (companion program to SWB, above)
http://www.javacoolsoftware.com/spywareguard.html
SpywareGuard Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=50

If you use Spybot S & D, be sure to clean *ONLY* the items displayed in
*RED*. DO NOT clean any items displayed in Black or Green at this time.

Lastly there is HijackThis. Hijack this is a very powerful, last resort type
of program which is generally best used in conjunction with help from those
who deal with the findings of the log created by the HijackThis scan. It
does nothing in the scan itself; it merely says what is in and running on
your PC. The items must be checked-marked to be "cleaned". You must
know *exactly* what you are checking-off before you proceed.
If you don't, you can quite possibly disable many useful and vital functions
of your PC. Remember; read the Tutorials, and seek help at SpywareInfo
Forums, Net-Integration, or TomCoyote forums for safety's sake.

HijackThis
http://www.spywareinfo.com/~merijn/downloads.html
If the preceding site is down, you may get HijackThis from Major Geeks
(amongst other sites as well)
Hijack This (from Major Geeks)
http://www.majorgeeks.com/download3155.html

HijackThis Tutorials **(MUST READ)**
http://www.spywareinfo.com/~merijn/htlogtutorial.html
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42
http://hjt.wizardsofwebsites.com/

Where to seek help with your HijackThis scan log
SpywareInfo Forums
http://forums.spywareinfo.com/
other help forums for HijackThis:
Net-Integration
http://forums.net-integration.net/index.php?c=19
TomCoyote
http://forums.tomcoyote.com/index.php?showforum=27

HTH -
--

LuckyStrike
(e-mail address removed)

How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
http://home.satx.rr.com/badour/html/post.html
--------------------------------------------------------------------
 
Back
Top